Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.cer (raw, json)
Hash identifier: C/t4ahuAevtkTHu1NFuTKSgqmoTGUU628pH3SoPKHvk=
Subject key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC4E61E45DE559EC8A1031CD24A59C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29192
IP: 195.85.222.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4e:61:e4:5d:e5:59:ec:8a:10:31:cd:24:a5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71986731925be8551a53091afe6d0972dfa3807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:20:e4:45:93:7e:45:79:b0:44:f4:05:a4:
69:23:bb:e3:3e:8f:29:59:fc:4c:ad:a6:0b:f7:f6:
d6:55:9b:f9:2a:e5:6c:cc:43:e8:2a:91:3f:ef:ad:
1a:47:86:28:30:b9:af:1f:da:02:cb:ca:07:65:67:
79:22:b1:5a:9f:2d:fc:47:a4:32:07:ac:b3:b6:41:
c9:84:7a:05:89:c9:27:bb:6a:d8:50:19:03:96:4c:
ed:52:20:71:5f:8f:4a:f2:80:1a:1f:8c:84:5c:2c:
2e:e3:d3:2e:c9:7b:ad:7d:bf:64:28:a3:b0:cf:d8:
ef:28:8f:ef:a9:0c:81:c6:4c:08:c0:09:7b:0c:94:
46:d6:0d:ef:cc:34:0d:a9:09:53:11:38:49:95:98:
ea:18:51:bc:62:cd:34:af:da:72:74:2d:ac:f6:2a:
07:0e:35:c3:03:f7:0a:26:c7:43:3e:bf:5e:9e:a7:
b7:76:39:a5:64:21:96:5e:ae:22:67:bf:07:e5:9a:
87:9b:cd:b9:1b:c4:df:2f:c6:9f:71:7e:a2:11:a5:
fc:b4:a9:17:84:dc:cd:cc:32:48:3a:a6:b5:02:73:
e2:56:3b:a2:3e:07:b9:cb:4a:2a:f1:93:32:82:c5:
9e:32:46:0b:2d:ac:0b:2f:b3:95:11:ce:b7:ec:87:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29192
Signature Algorithm: sha256WithRSAEncryption
83:ea:11:6f:32:1f:0c:e2:f2:21:1e:4e:1f:40:32:e6:b0:b3:
79:c6:3f:dc:3a:12:9b:c4:08:4a:3a:bf:7b:9f:2e:a1:b6:b4:
84:3b:cb:03:d8:52:5d:84:51:9f:71:03:2f:99:73:b8:eb:bd:
24:8f:3a:b5:86:1e:2e:5e:0e:20:02:6b:7e:a1:3a:a3:02:c2:
92:bf:f8:1c:eb:d0:20:1e:d3:23:21:5f:0c:67:87:5c:5a:bd:
5b:8d:a9:e0:74:05:4e:ca:43:33:e0:9a:3c:b3:fb:64:a7:6e:
84:15:67:d0:e3:98:74:c7:4c:f2:40:40:64:37:e7:8a:bc:12:
0b:64:a7:3f:5e:80:9a:54:2d:54:ef:8e:f3:15:9c:81:a8:64:
42:01:a0:64:c0:c9:35:83:86:42:c7:4a:48:ab:c5:8d:bb:ba:
0a:3d:40:6d:ab:14:4a:4c:1f:c9:cb:b1:63:8f:72:3c:0e:d6:
fd:85:1e:40:be:bb:b5:83:25:bc:0e:68:52:ad:03:dd:ca:90:
18:0b:c2:b3:48:96:31:16:d6:ff:e0:74:42:57:5c:bb:92:e6:
47:97:a7:83:0a:01:ff:e3:14:0d:63:63:63:4e:e1:f6:b9:9b:
91:6d:37:0c:c5:bc:cd:2e:51:37:68:31:df:80:82:e7:2d:fe:
9c:e5:4e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:56:30 2025 by rpki-client